
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft
File: rLhNci0lVbSDPOQGgw_b_pgrfGY.mft (raw, json)
Hash identifier: mPSOQ4VsxguMUlDQbnHk2WAjPB6V/esV/gUuxDiUrHw=
Subject key identifier: 90:9E:C3:CC:82:50:9B:8A:8C:D3:F0:19:CC:3E:79:5B:13:25:4C:B6
Authority key identifier: AC:B8:4D:72:2D:25:55:B4:83:3C:E4:06:83:0F:DB:FE:98:2B:7C:66
Certificate issuer: /CN=A9180669/serialNumber=ACB84D722D2555B4833CE406830FDBFE982B7C66
Certificate serial: A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft
Manifest number: A5
Signing time: Thu 19 Mar 2026 06:15:54 +0000
Manifest this update: Thu 19 Mar 2026 06:15:54 +0000
Manifest next update: Thu 26 Mar 2026 06:15:54 +0000
Files and hashes: 1: rLhNci0lVbSDPOQGgw_b_pgrfGY.crl (hash: QbRYeEIwHZTQcCpU/fyhoaSLeHmGILn3ICPEnYq2QPE=)
2: 7D1BFC5E24B411F08834DE10C4F9AE02.roa (hash: VUJM2ojAhkllD4gh361hqeaKIphDeFpY6K+WKL7Se80=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.crl
rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 06:15:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180669, serialNumber=ACB84D722D2555B4833CE406830FDBFE982B7C66
Validity
Not Before: Mar 19 06:15:54 2026 GMT
Not After : Mar 26 06:15:54 2026 GMT
Subject: CN=69bb949a-ab7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:5d:70:a7:82:e7:2c:c9:73:ba:10:47:cb:
32:de:ae:6d:da:e8:80:fc:e2:12:d9:66:7e:b5:5d:
4f:a1:69:c1:41:43:c3:e9:a3:25:31:4b:77:67:b3:
1f:71:56:01:18:0b:c0:fd:df:71:2e:4b:50:ce:c3:
a3:19:c3:7c:b4:b4:03:27:3e:c0:08:2b:f0:21:53:
c1:3b:eb:04:02:3c:df:49:a9:2f:f6:ac:66:ca:8d:
cb:b4:e7:61:6b:c3:ac:a0:6a:4b:ff:e7:b9:21:19:
cb:c4:ee:4d:d4:4d:74:3f:c4:46:e7:2f:af:98:e5:
8e:43:f6:3d:eb:8b:a7:eb:a1:ee:a0:c4:95:30:99:
eb:72:fe:76:fe:39:d0:41:8d:b8:b4:3d:b9:be:80:
bb:0a:39:e9:07:52:a3:1c:ee:84:fe:ab:0d:9a:13:
ff:da:58:0e:c5:84:29:ee:0a:56:88:3f:6c:c7:a9:
ab:76:28:28:1e:98:e3:ef:93:00:ee:ae:07:bb:7b:
0f:ed:0e:a3:ff:29:26:06:c8:50:25:31:75:03:c3:
10:39:12:60:9b:35:f4:18:d9:f0:61:44:9a:b9:00:
5d:80:33:89:92:7c:55:cf:e6:f9:ce:81:be:00:54:
1b:40:75:42:f7:49:25:6c:2e:df:c4:29:94:91:c6:
41:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9E:C3:CC:82:50:9B:8A:8C:D3:F0:19:CC:3E:79:5B:13:25:4C:B6
X509v3 Authority Key Identifier:
keyid:AC:B8:4D:72:2D:25:55:B4:83:3C:E4:06:83:0F:DB:FE:98:2B:7C:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6f:35:ac:3c:31:16:c5:ab:20:13:7e:8e:35:6e:b6:17:da:
74:fa:e0:f3:aa:76:3f:de:23:1b:35:d7:11:74:04:5a:69:ed:
0b:cc:a0:60:c2:25:34:34:de:5e:70:77:f0:80:ce:15:d3:b7:
ab:f6:fb:5e:74:d5:5b:20:11:e1:74:52:22:70:92:8b:3e:d4:
bb:47:f5:f9:6b:fc:bf:f7:54:09:6e:a7:32:05:5f:55:3e:ae:
79:38:11:52:cd:1b:ec:44:53:06:db:6d:aa:c2:c9:14:5b:39:
da:66:58:49:e2:ad:25:59:21:cd:4b:b8:63:24:f5:66:db:7c:
27:f0:49:96:db:67:0f:00:d2:e7:b1:0a:9b:82:fb:c5:69:1e:
79:7f:65:97:5e:27:3c:12:ad:af:1d:0f:f7:13:72:92:02:bf:
a5:96:9f:5b:37:2b:6e:06:db:6d:e7:74:1e:a2:54:5d:51:46:
67:05:52:9a:09:dc:52:86:3f:47:80:69:1a:2a:a9:0e:74:f5:
50:49:c2:66:b3:ce:fe:7a:9e:a5:58:b1:21:4a:2d:26:75:f0:
d5:c8:5b:27:87:d2:69:aa:3f:67:62:c5:50:bb:7e:06:cf:c4:
75:db:38:e2:0e:d4:a9:83:c7:4a:02:73:42:18:6c:1a:b7:c8:
39:ba:99:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA2NjkxMTAvBgNVBAUTKEFDQjg0RDcyMkQyNTU1QjQ4MzNDRTQwNjgzMEZEQkZF
OTgyQjdDNjYwHhcNMjYwMzE5MDYxNTU0WhcNMjYwMzI2MDYxNTU0WjAYMRYwFAYD
VQQDEw02OWJiOTQ5YS1hYjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxJ5dcKeC5yzJc7oQR8sy3q5t2uiA/OIS2WZ+tV1PoWnBQUPD6aMlMUt3Z7Mf
cVYBGAvA/d9xLktQzsOjGcN8tLQDJz7ACCvwIVPBO+sEAjzfSakv9qxmyo3LtOdh
a8OsoGpL/+e5IRnLxO5N1E10P8RG5y+vmOWOQ/Y964un66HuoMSVMJnrcv52/jnQ
QY24tD25voC7CjnpB1KjHO6E/qsNmhP/2lgOxYQp7gpWiD9sx6mrdigoHpjj75MA
7q4Hu3sP7Q6j/ykmBshQJTF1A8MQORJgmzX0GNnwYUSauQBdgDOJknxVz+b5zoG+
AFQbQHVC90klbC7fxCmUkcZBrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJCew8yC
UJuKjNPwGcw+eVsTJUy2MB8GA1UdIwQYMBaAFKy4TXItJVW0gzzkBoMP2/6YK3xm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDY2OS83N0U5MDRDODI0
QjExMUYwQTA1QjAwNjRDNEY5QUUwMi9yTGhOY2kwbFZiU0RQT1FHZ3dfYl9wZ3Jm
R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JMaE5jaTBsVmJTRFBPUUdnd19iX3BncmZHWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDY2OS83N0U5MDRDODI0QjExMUYwQTA1QjAwNjRDNEY5QUUwMi9yTGhOY2kwbFZi
U0RQT1FHZ3dfYl9wZ3JmR1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALG81rDwxFsWrIBN+jjVuthfadPrg86p2P94jGzXXEXQEWmntC8ygYMIlNDTe
XnB38IDOFdO3q/b7XnTVWyAR4XRSInCSiz7Uu0f1+Wv8v/dUCW6nMgVfVT6ueTgR
Us0b7ERTBtttqsLJFFs52mZYSeKtJVkhzUu4YyT1Ztt8J/BJlttnDwDS57EKm4L7
xWkeeX9ll14nPBKtrx0P9xNykgK/pZafWzcrbgbbbed0HqJUXVFGZwVSmgncUoY/
R4BpGiqpDnT1UEnCZrPO/nqepVixIUotJnXw1chbJ4fSaao/Z2LFULt+Bs/Edds4
4g7UqYPHSgJzQhhsGrfIObqZMg==
-----END CERTIFICATE-----
Generated at Fri Mar 20 17:25:44 2026 by rpki-client